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A symmetric 1 — !■ 2 quantum cloning machine (QCM) is presented that provides high-fidelity 
copies with 0.90 < F < 0.95 for all pure (single-qubit) input states from a given meridian of the 
Bloch sphere. Emphasize is placed especially on the states of the (so-called) Eastern meridian, that 
includes the computational basis states |0) , |1) together with the diagonal state |-|-) = -^(10) -f |1)), 
for which suggested cloning transformation is shown to be optimal. In addition, we also show how 
this QCM can be utilized for eavesdropping in Bennett's B92 protocol for quantum key distribution 
with a substantial higher success rate than obtained for universal or equatorial quantum copying. 
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I. INTRODUCTION 

The ability to copy information is fundamental for 
many processes in distributing and dealing with data. 
While classical information can often be copied many 
times without any significant loss, the cloning of quantum 
information is seriously restricted by the laws of quan- 
tum mechanics. This limitation is known today as the 
non-cloning theorem [l[ and has found its applications 
in quite different fields of quantum information theory, 
such as quantum computation 0, Q and quantum cryp- 
tography 0, Q . 

In processing quantum information, formally, any de- 
vice that provides for M unknown input states of a given 
system N (> M) output states (of the same or some 
analogue systems) is called a Af — > iV quantum cloning 
machine (QCM). To ensure a proper quantum behaviour, 
such machines are usually represented as unitary trans- 
formations; they are called symmetric if the N output 
states are identical to each other, and are said to be 
nonsymmetric otherwise. In this work, we shall consider 
symmetric 1 — )- 2 QCM that provides for a (pure) input 
state \sa) (of qubit a) the two qubits a and b in the 
same output state = p^"*, and where denotes 
the (reduced) density matrix of the corresponding qubit. 
For an ideal transformation, of course, we might expect 



>JO)JQ>. 



(1) 



i.e. that the input and output states of qubit a are the 
same, \sa) = Is^), but this would be in confiict with the 
non-cloning theorem mentioned above. In the transfor- 
mation ([T]), as usual, we here suppose that the qubit b 
was initially prepared in the state |0)^ and that the state 
vectors \Q) ^ and \Q) denote the initial and final states 



of the corresponding cloning device. In order to charac- 
terize the 'quality' of a cloning device, we shall often use 
below the fidelity 



F = I s) 



(2) 
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between the input and output state (of qubit a), which 
takes the values < F < 1 and where F = 1 refers to 
the case that = \s) {s\. 

Several QCM's have been discussed in the literature 
before [1-0|! Buzek and Hillery @, for example, worked 
out a symmetric 1 — >■ 2 QCM that provides copies with 
the fidehty F = 5/6 ~ 0.83 independent of the given 
input state. This state-independent transformation, 
which is now known as universal QCM, has found re- 
cent attention and application in quantum cryptography, 
namely, in optimal eavesdropping attack Q within the 
six-state protocol 0]. For some protocols in quantum 
cryptography, however, only few states {|sa)} are (pre-) 
selected from the Bloch sphere and, hence, one may wish 
to find a state-dependent QCM that provides copies with 
higher fidelity than the universal Buzek-Hillery machine 
for this particular set of states. 

The best-known example of such a state-dependent 
QCM is equatorial (or phase-covariant) QCM [7[. This 
QCM provides copies with fidelity F = 1/2+ ^J\J^ « 
0.85 for all states which are taken from the equatorial 
plane of the Bloch sphere. Equatorial QCM has also 
found a remarkable application in quantum cryptogra- 
phy, since it can be used to improve the efficienc y o f 
an eavesdropping attack within the BB84 protocol jlOj . 
While, in fact, only four states (from the equatorial 
plane) are used in order to encode the information in the 
BB84 protocol, equatorial QCM enables an eavesdropper 
to obtain copies of these states with the highest fidelity, 
if compared with any other known QCM 

In this work, we here present and discuss another ex- 
ample of state-dependent QCM — a (meridional) QCM 
that provides copies with high-fidelity 0.9 < F < 0.95 
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for all states along a given half-eircle (the 'Eastern' 
meridian) of the Bloch sphere, that includes three states 
{|0) , |1) , 1+)} which define this meridian uniquely. This 
newly suggested QCM is constructed to be optimal for 
copying of all input states from the meridian. We also 
analyze how this newly suggested QCM can be applied 
in quantum cryptography for the eavesdropping within 
Bennett's B92 quantum key distribution protocol 
It is shown, in particular, that this transformation pro- 
vides a substantial higher success rate than obtained for 
a universal or equatorial quantum copying. 

The paper is organized as follows. In the next sec- 
tion, let us first introduce and discuss the general form of 
symmetric 1 — > 2 cloning transformations. In particular, 
here we shall analyze the Buzek-Hillery-type transforma- 
tions which can be utilized for both, a state-dependent 
and state-independent (symmetric) copying of quantum 
states. By making use of some additional parameter in 
the definition of the cloning transformation (when com- 
pared to Ref. [11), we then present a QCM in Subsec- 
tion |IIB] which enables one to produce for a selected set 
of pure input states from the Bloch sphere copies with 
higher fidelity than it can be obtained for universal or 
equatorial quantum copying. The QCM is than defined, 
in Subsection III C[ to be optimal for copying states from 
chosen meridian of the Bloch sphere. Below, there- 
fore, we will refer to this cloning transformation as a 
meridional QCM, even if the particular region of high- 
fidelity cloning can be chosen rather freely by adapting 
just three parameters in the given cloning transforma- 
tion. In Subsection III Dl we present explicit form of 
the meridional cloning transformation and recall proper- 
ties of it. In Section IlIII wc later analyze for this new 
QCM the success (or failure) of an potential eavesdropper 
within Bennett's B92 protocol [ll| for the distribution of 
quantum keys. In this section, emphasis is placed espe- 
cially on the question how efficient such an eavesdropper 
can attack the transmission of quantum information; in 
our discussion below, this will be quantified by means 
of the mutual information between the eavesdropper and 
the legitim user as well as the discrepancy of a qubit 
(if compared with the originally transmitted one) after 
a corresponding attack has been made. Finally, a few 
conclusions are drawn in Section ITVl 



II. QUANTUM CLONING FOR A 
RESTRICTED SET OF INPUT STATES 



General symmetric 1 — > 2 cloning 
transformations 



values from < 9 < tt and < (j) < 2tt, respectively, 
and we shall often use this Bloch sphere (picture) in or- 
der to visualize the states of interest. Moreover, let us 
refer to the intersection of the Bloch sphere with the x- 
z plane as the main circle^ so that all states from this 
intersection can be parameterized by means of just the 
(single) parameter as 



cos^|0),±sin^|l)„ . 



(3) 



While, in this expression, the '-f-' sign refers to the right 
(Eastern) meridian of the main circle and includes for 
e = tt/2 also the diagonal state \+) = ^ (|0) + |1)), 
the '-' sign is associated with its left (Western) meridian 
and includes the state |— ). For the sake of simplicity in 
visualizing the different states on the Bloch sphere, we 
shall sometimes use also this 'geographical' notation in 
our discussion below. 

Although the state \s)^ of a given qubit will be typi- 
cally in a superposition of the two basis states |0)^ and 
it is of course sufficient to know the transforma- 
tion of just the basis in order to obtain a proper copying 
of states. Therefore, the most general (1 — > 2) quantum 
cloning transformation for the state of qubit a upon qubit 
b can be cast into the form 



|o) JO) jg), 
|i)Jo)JO), 



m,n— 



m,n— 



;mn / i 



(4) 



where \Q)^ denotes the initial state of the cloning ap- 
paratus, and where we have assumed — without loss of 
generality — that the second qubit h was prepared ini- 
tially in the basis state |0)^. Once, the transformation 
has been performed, \m)^ and \n)^^ denote the output 

basis states of the two copies, while \Qmn) ^ ^^'^ Qmn^ 
are the corresponding states of the apparatus. As seen 
from the transformation ([3]), here we do not assume any 
additional condition for the final states of the cloning 
apparatus. However, in order to ensure that the trans- 
formation ^ is unitary, 



E 



/ab 



\Q)c 



(5) 



To introduce some notations that are necessary for our 
discussion below, let us start from a single qubit a whose 
(pure) states can be written in the Bloch sphere represen- 
tation as |s)^ = cos 1 10)^ + sinfe"^ |1)^, and with |0)^ 
and |1)^ being the standard (computational) basis states. 
In this representation, the parameters 9 and take their 



for all possible input states, i.e. for |i)^j = {|0)^|0)j,, 
|l)a the final states of the apparatus must fulfill 

certain requirements (l^ . 

In Eq. (O, the three-partite basis {|A)^^^} refers to a 
complete and orthonormal basis for the overall system 
'qubits a,b + apparatus'. Thus, the requested unitarity 
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UW = 1 of the transformation Q implies the conditions 



1 

E 

m,n— 



{Qmn I Qr 



= E (q 



= 1 



^ ^ ( Qmn I Qjnn 
m.n— 



= 0. 



(6) 



For any exphcit construction of a (1 — > 2) quantum 
cloning transformation, we must therefore 'determine' 



the final states \Qmn)c and 



Qr. 



of the apparatus in 



line with the conditions ([6]). These state vectors then 
define the QCM uniquely. 

Before we shall construct QCM with some particular 
properties, let us consider the simplest case of such a 
transformation as first suggested by Wootters and 
Zurek (3 



\0)a\0)b\Q)c 

|i>J0>JQ>, 



|0)jO)JQoo) 



IDJi) 



Q 
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(7) 



In this transformation, obviously, only a single term is re- 
tained from the summations on the right-hand side (rhs) 
of Eqs. i.e. the term with m = n = in the first 
and m = n = 1 in the second line. No further free- 
dom remains in the set-up of this transformation since 
the unitarity conditions ([5]) then require (Qoo I <3oo) ~ 
{Qu I <3ii) = 1- As seen from Eq. ([7]), moreover, the 
Wootters-Zurek transformation is symmetric with regard 
to an interchange of the basis states |0)^ O and this 
implies that the same symmetry helds also for the state 
of the two copies p™* and pg"*, i.e. p""* = pg"*. For the 
Wootters-Zurek transformation, furthermore, the fidelity 
between the input state (from the main cirlce) and the 
corresponding output is given by 



F{9) = 



(8) 



Therefore, this particular transformation can provide an 
'exact' copy with fidelity F(0) = F{Tr) = 1 just for the 
basis states |0) and |1) , i.e. the two 'poles' of the Bloch 
sphere, while the fidelity drops down to -F(-|) ~ 1/2 for 
all states along the equator and, especially, for the two 
diagonal states |±) . For this reason, the Wootters- 
Zurek transformation appears to be of little help if one 
wishes to copy (unknown) states other than the basis 
states themselves. 



B. Cloning transformations of Buzelt-Hillery type 

Additional terms in the cloning transformation ^ 
need to be considered if we wish to construct a QCM 
that supports an equal-fidelity cloning for all states on 
the Bloch sphere, or which improves the fidelity between 
the input and output states for certain regions on this 



sphere. For example, Buzek and Hillery Q have ana- 
lyzed in quite detail the three-term transformation 

|o> JO) JQ>, ^ |o)jo)jgo), 

+ [|o)ji), + |i)jo),]|yo), , (9) 

|i)alo)JQ). ^ |i)ali>JQi)c 

+ [|0)J1), + |1)J0),] iFi),, (10) 

which takes into account two additional terms (com- 
pared with the Wootters-Zurek transformation ([7])) and 
which gives us further freedom in choosing the final 
states of the cloning apparatus. To follow the nota- 
tion by Buzek and Hillery Q, here we have introduced 



IQo) = IQoo), \Yo) = \Qoi) = IQio), IQi) 



l^-i) 



Q 
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and 



to denote the final states of the 

apparatus. Again, in order to ensure the symmetry with 
regard to an interchange |0)^ O |1)^ of the basis states 
of qubit a, we have assumed conditions IQoi) = IQio) 
and Qoi^ = Qio^ for the final states of the cloning 
apparatus. 

Eqs. ([9|)- (fT0|) can be utilized to define cloning trans- 
formations for which the fidelity between the input and 
output states is either state-independent or depends ex- 
plicity on the given input. This behaviour depends on the 
additional restriction we shall place on the final states of 
the apparatus, beside of the unitarity conditions ([S]). For 
the sake of simplicity, let us omit in the following the 
indices a, b and c of the individual subsystems but keep 
in mind that \kl) = |fc)^ |Z)^ always refers to the state of 
the two copies to be created, and that the vectors \Qi) 
and \Yi) belong to the cloning apparatus. With this 
change in the notation, we find from Eqs. ^ that the 
final-state vectors of the apparatus in the Buzek-Hillery 
transformation must satisfy the conditions 



{Q^\Q^)+2{Y,\Y,) = 1, 

{Yo\Yi) = 0, 



for i = 0,1; (11) 
(12) 



in order to ensure the unitarity of the transformation. 
For a general (pure) input state ^ from the main circle, 
the QCM (Pjl- pU]) then gives rise to the two-qubit density 
operator p°)J' which contain 14 scalar products between 
the final-state vectors from the apparatus. Each scalar 
product introduces a (complex) parameter for the Buzck- 
Hillcry transformation ([Sjl- fTU]) . This gives rise to a total 
of 14 parameters for the quantum cloning transformation 
dSll-lITOl), while only the 3 restrictions (III|)-([n]) need to 
be fulfilled due to the unitarity of the transformation. 

Further conditions must therefore be formulated in or- 
der to define the QCM properly. For example, we may 
choose all scalar products to be real and also request that 
the two final-state vectors \Yo) and \Yi) have an equal 
norm 



(lo|yo) = {Yi\Y,) ^ c- 



(13) 
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Under these conditions, Eq. ([TT|) takes the same form for 
i = and 1, and hence, (Qo | Qo) = {Qi I Qi) = 1 — 2(^. 
There are two other conditions that can be obtained from 
Eqs. ([TT]) - p^ by using the restriction (|13p . namely. 



{Yo\ 
{Qi 



{Yi I Qo) 
(Qo I Yo) 



W2, 
k/2. 



(14) 
(15) 



With these additional notations and conditions, we have 
arrived at the final-state density matrix p°'^^ of the trans- 
formation ([^- p^ that now depends only on three real 
parameters. This is quite in contrast to the original work 
of Buzek and Hillery [H who assumed the final states 
of the apparatus {Qi \Yi) ~ to be pairwise orthogo- 
nal to each other for the cloning of the two basis states 
|i) , i = 0, 1. While the condition ((TS|) introduces a 
nonorthogonality between the final states of the appa- 
ratus, three parameters C, 77 and k enables us to provide 
high-fidelity copies for a region of input states from the 
Bloch sphere. However, the three parameters C, V and n 
are not completely independent of each other but must 
fulfill the three inequalities 



< C < o 



1 

2 ' 



< V < 2v/C(l-2C), 
< K < 2v/C(l - 20 . 



(16) 

(17) 
(18) 



due to Schwarz' inequality for the state vectors of the 
cloning apparatus. 

Using the final-state density matrix for the trans- 
formation (|9))- (|T0)) . it is simple to show that the reduced 
density operator 



cos C cos ( 

2 ^ 



+ -{K±rjsme) (|0)(1| + |1) (0|) 



sin^ - +Ccos6l ) |1) (1| 



(19) 



is the same for both subsystems a and b, that is = 
Tra (fab) ~ Trfc (pab)- Wc Can utilize this expression 
([T^ to calculate also the fidelity between the input and 
output for all states \s)^ = cos | |0)^ ± sin | |1)^ along 
the main circle 

Fi6) ^ I s) 

= (1-C) - i(l-r;-2C)sin2 0±|sin0(2O) 

Although the parameters r\ and k are restricted by the 
inequalities (|16 |) -(|17 |) . it is this freedom in choosing these 
parameters that enables us to optimize the fidelity F(Q) 
for certain (regions of) states. Since k has a different 
sign for the two parts of the main circle, a nonzero value 
this parameter leads to a quite different behavior of the 
fidelity along the Western and Eastern meridian:the high 



fidelity along the Eastern meridian correspond to posi- 
tive parameter k, while the high fidelity along the West- 
ern meridian is achieved for negative k. So, for proper 
values of '7 and k we can obtain a high fidelity for one 
meridian. 



C. Optimization of the cloning transformation 

Eq. (PH]) can be applied to determine an 'optimal' set 
of parameters, either for a few selected input states or 
for a whole region of states from the Bloch sphere. Gen- 
eral method for optimization of parameters of the uni- 
tary transformation was developed in Ref. [l3j and was 
successfully applied to show optimality of some cloning 
transformations [T^ . The optimal cloning transforma- 
tion maximizes average single-clone fidelity 



dd 



(21) 



for chosen region of states on the Bloch sphere, where 
N is the normalization factor. Substituting in this ex- 
pression the fidelity function (|20p and integrating over 
all states from Eastern meridian of the Bloch sphere, we 
obtain average fidelity as function of the parameters C, 
and K, i.e. 



(22) 



Following numerical optimization procedure over the 
three parameters, which are restricted with inequalities 
(fTB | - pT)) . gives values 



c 



1 

To' 



2 

5 ' 



(23) 



approximately, that correspond to the maximal average 
fidelity F w 0.927. 

There is, however, another way to perform optimiza- 
tion of the fidelity function ([20| that does not require 
numerical calculations. It is known that parameters of 
universal QCM can be found from the requirement of 
optimal copying of just the discrete set of six states that 
lie on and z axis of the Bloch sphere Similarly 
the requirement of optimal copying of four states that lie 
on X and y axis of the sphere is sufficient to determine 
equatorial QCM. We may, for example, request an equal 
and maximum fidelity for just three selected states from 
the meridian in order to determine optimal parameters 
of the cloning transformation ([^- pH]) . If the input |s) is 
taken from the set of the three states {|0) , |1) , |+)} and 
we request an equal-fidelity cloning of them, the max- 
imum fidelity F = 0.90 is obtained for the parameters 
(1231) • This result is not surprising since the fidelity has 
local minima for the states |0) , |1) and |-|-); that is the 
main reason of optimization with this three states. In 
fact, in this optimization procedure we restricted the fi- 
delity function (PUI) downwards. 
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Explicit form and properties of the cloning 
transformation 



D. 



With the help of the parameters ([23|) the final-state 
vectors of the apparatus can be defined as 



\Yn) = 



\Qo) 




11^1 ' 




(24) 



in line with the conditions ([TTl)-(Il2]) and (HHl-lITSl) from 
above. These four vectors span only a two-dimensional 
subspace within the (four-dimensional) space of the gen- 
eral copying machine Q • If we introduce the orthogonal 
basis |0) and |1) for this subspace, the transformation 
([5|)- PII)) can be brought into the form 



|0)|0)|Q) 



|1)|0)|Q) 



|00)(|0) + |1)) 



(|01) + |10)) |0) , (25) 



|11)(|0> + |1)) 



(|01) + |10)) |1) , (26) 



if the vectors are substituted into the transformation 
((9l)- p0)l . This makes our suggested QCM now exphcit. 
The QCM ([25])- ([261) is optimal for a symmetric hight- 
fidelity cloning of the states from Eastern meridian. 

If we substitute the parameters (j23p into this formula, 
the input-output fidelity for the states from the main 
circle becomes 



n^)^ A-lsin^.iisin. 



(27) 



Figure [T] displays the behavior of this fidelity for the two 
meridians of the main circle. While the fidelity is F > 
0.9 for all states along the Eastern meridian (associated 
with the + sign in Eq. ((27)) ). it drops quickly down up to 
F = 1/2 for the |— ) state along the Western meridian. 
Along the Eastern part, that includes the three states 
{|0) , |1) , 1+)} from above, however, a remarkably small 
variation of the fidelity with 0.9 < F < 0.95 occurs and 
may favor this region to produce quantum copies with 
high fidelity. 

So far, we have considered input states from the main 
circle for the transformation pSjl -pG ]) . If we apply this 
transformation to other (pure) states from the Bloch 



sphere \s)^ 
fidelity 

F{e, 



\0)a 



fe*"^ with 7^ 0, the 



9 
10 



■ sin 9 (sin 6 — cos i 



(28) 



becomes dependent on the angle cf) also and makes the be- 
havior slightly more complex. Note that this particular 




0.0 0.5 1.0 1.5 2.0 2.5 



3.0 



FIG. 1: Fidelity (|27|) of the quantum cloning transformation 
(|25p - (|26| l as function of the angle 9. The fidelity between the 
input and output states are shown for the states ([3]) from 
the main circle; Eastern meridian (solid line) and Western 
meridian (dashed line). See text for further discussion. 



dependence ([28|l of the fidelity was obtained from the re- 
quest that the states from Eastern meridian can be copied 
in optimal way. By making similar requirements for other 
meridians on the Bloch sphere, a high-fidelity cloning is 
possible also for this regions on the Bloch sphere. 



III. APPLYING THE MERIDIONAL QCM FOR 
EAVESDROPPING 



Although an eavesdropping of the (quantum) commu- 
nication between two partners, say Alice and Bob, might 
be seriously hampered by the well-known impossibility 
to produce exact clones of quantum information (non- 
cloning theorem), the generation of high-fidelity copies 
may enlarge the success rate for such an attack. It is 
therefore worth to know for both, the two partners who 
wish to communicate as well as for a potential eavesdrop- 
per, how much our suggested (meridional) QCM ((25)) - 
((26)) will affect Quantum Key Distribution (QKD) pro- 
tocols. In this Section, we shall therefore analyze with 
which success (or failure) an potential eavesdropper, say 
Eve, may attack Bennett's B92 protocol |11|. 



In the B92 protocol, only two nonorthogonal quantum 
states arc utilized in order to encode and transmit the 
information about the cryptographic key. As usual, we 
suppose that the information is sent from Alice to Bob 
by means of a quantum communication channel. At the 
beginning of the key distribution protocol, Alice encodes 
each logical bit, or 1, into two nonorthogonal states, 
that can be parameterized in computational basis with 



6 



single parameter i? [l5| as 



= COS - |0) 

= sin||0)- 



-Binfll) 
cos - |1) 



(29) 



The overlap of the states 0{'&) = \ {u \ v) = sin^ ■& gives 
the distance between states \u) and \v) in geometric sense. 
These qubits are then sent to Bob who performs a posi- 
tive operator- valued measurement (POVM), and the best 
operators for that arc [l5| 



Go 



1 



1 + {u\v) 



(1 



1 + {u\v) 
1 — Gi — G2 



(1 



H), 



{v\) 



(30) 



(31) 
(32) 



Only measurements with POVM elements Gi and G2 
are conclusive, because certain conclusion about received 
state \u) or \v) can be made after the measurement. Af- 
ter all the qubits have been sent (and measured), Bob 
tells to Alice numbers of conclusive measurements via a 
public channel, which can be monitored but not modified 
by possible eavesdropper. Only those bits (obtained in 
Bob's conclusive measurements) can be used to construct 
the key, while all the rest need to be discarded because 
no definite conclusion can be drawn from the outcome of 
Bob's measurement. To test and recognize a (possible) 
eavesdropper, Alice and Bob compare moreover the val- 
ues of some of their bits via the public channel in order 
to get an estimate how likely their communication was 
disturbed. 

In practice, a disturbance in the transmission of a (se- 
cret) key can have very different reasons. Apart from an 
eavesdropper, the quantum control during the prepara- 
tion or transmission of the qubits might be incomplete 
for a given realization of the quantum channel. For all 
practical realizations of QKD protocols, therefore, a cer- 
tain error rate (disturbance) need to be accepted, and an 
eavesdropper might be successful in extracting informa- 
tion even if the protocol is inherently secure in the ideal 
case. To quantify the disturbance in the transmission of 
a single qubit, a convenient measure is the probability 
that Alice and Bob detect an error. If Bob would know 
the state |s) of one or several qubits in advance, that 
were sent to him by Alice, he could easily test for a possi- 
ble eavesdropping attack. In this case, he will receive in 
general the qubits no longer in a pure but a mixed state 
that has to be described in terms of its density matrix p. 
The discrepancy that is detected by Bob is given by 



D 



1 



(33) 



Since Bob knows the maximal discrepancy Dmax for the 
given channel (due to the incomplete quantum control of 
the given transmission), he could recognize an eavesdrop- 
ping attack for D > Dmax and discard the key accord- 
ingly 



A central question for Eve is of how much information 
she can extract from the transmission of the key if the 
disturbance due to his attack should be D < D„iax ■ From 
the initial agreement between Alice and Bob about the 
basis states which are to be chosen randomly. Eve might 
know that Alice prepares the qubits in one of the two 
states (|^^ with probability pi = 1/2 {i = 0, 1). Before 
Eve has measured a given qubit, her (degree of) ignorance 
is given by Shannon's entropy H ~ -~^Pi log2 Pi = 
— log2(l/2). After the measurement, she increased her 
knowledge about the system by decreasing this entropy, 
a measure that is called the mutual information that Eve 
has acquired due to the measurement. Obviously, Eve 
will try to obtain as much information as possible keeping 
the discrepancy D < Dmax- 

In order to discuss how much Eve will affect the trans- 
mission (and thus increase her knowledge about the 
transmitted information), we must specify the circum- 
stances under which the eavesdropping attack is made. 
Let us suppose that Eve performs incoherent (i.e. in- 
dividual) attack on the communication channel with a 
QCM. Here, we shall not yet specify the QCM exphcitly 
in order to enable us to compare different QCM's be- 
low. According to the incoherent strategy. Eve will copy 
(attack) each qubit independently as they are sent from 
Alice to Bob. As output of her cloning transformation, 
she then obtains two copies of one of the two possible 
states and pi^,) (which just correspond to the two 

input states ([21])) with a fidelity as defined by the given 
QCM. While Eve transmits one of her copies further to 
Bob, she could measure the second copy following the 
same procedure as Bob. 

To calculate the mutual information between Alice and 
Eve that is to be extracted from the eaves drop ping, we 
can follow the procedure as described in Ref. [la] and [131 ■ 
Using the POVM elements ([30|)-([32]), the probability for 
Eve to obtain the outcome fi is 



Pi_n = Tr(GpPi 



(34) 



and where the operators pi refer to the two possible states 
{p\u)-i P\v)} of hsr copy. After the measurement, when 
she has obtained a particular outcome p, the posterior 
probability Qi^ that pi was prepared by Alice is 



Pfj^iPi 

9m 



(35) 



where = Pfj-iPji Pj ^ 1/2 is the probability 
for sending the states \u) and \v) within the B92 
protocol. With these probabilities, the Shannon entropy 
(which was H = — log2(l/2) = 1 initially), becomes 



= -^QiplogQjp 



(36) 



once the result p was obtained, and hence the mutual 
information is 



I = H- Y^q.H,. 



(37) 
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FIG. 2: The mutual information between Alice and Eve I{0) 
as function of the overlap O of the states (|29p for eavesdrop- 
ping with meridional (solid), equatorial (dashed) and univer- 
sal (dotted) QCM's. 



To determine the possible success of an eavesdropper, 
we only need to analyze the explicit form of the output 
states p\u) and p\y^ for a particular QCM. By substituting 
the output states into Eqns. (|57| and we may then 
calculate the mutual information and discrepancy in case 
of an eavesdropping with the QCM. Since the copies 
from the QCM are symmetric, the mutual information 
extracted by Eve Iae equals to the mutual information 
obtained by Bob in his measurements Iab = Iae = I 
and, obviously, depends from the overlap of the states 

dMl). 

If Eve applies universal QCM, which provides copies 
with fidelity F = 5/6, she causes discrepancy D ~ 
1/6 sa 0.17 independently from the choice of the states 
(|29p . The mutual information extracted by Eve is given 
at Fig. [2] with dotted line. For equatorial QCM with the 
fidelity F = 1/2-1- a/T/S of the copies, discrepancy equals 
D = 1/2-078 « 0.15 for arbitrary states ([29]) and the 
mutual information is shown at Fig. [2] with dashed line. 
For the eavesdropping with meridional QCM discrepancy 
depends from particular choice of the states (|29p and is 
given with inequality 0.05 < D < 0.10. The mutual in- 
formation in this case is shown at Fig. [2] with solid line. 
Apparently, our suggested QCM introduces a lower dis- 
turbance into the data transmission between Alice and 
Bob than it is caused by universal or equatorial QCM's. 
It also enables Eve to extract in course of her eavesdrop- 
ping more information than obtained by means of these 
two QCM's. 

Suggested meridional QCM as well as universal and 
equatorial QCM's belongs to the class of QCM's with 
an axillary system There are, however, several pro- 
posals of optimal cloning transformations without any 
axillary system 0, 0, uM- 1^ i^, of course, important 
to compare efficiencies of the eavesdropping with merid- 
ional QCM and the best QCM without the axillary sys- 
tems. Optimal cloning transformation that clone at best 



two arbitrary pure states of a qubit was developed in 
Refs. [l^, [13 • This transformation was shown to have 
extremely large fidelity 0.987 < < 1 between the input 
and output states. However, in this type of cloning the 
copies are strongly entangled. That leads to the fact that 
in the eavesdropping with the QCM without the axillary 
system, Eve has very poor information about the result 
obtained by Bob. Indeed, as the result of Bob's measure- 
ment on received qubit, state of Eve's qubit reduces to 
strongly mixed state. In fact, presence of the axillary sys- 
tem is necessary to eavesdrop efficiently a QKD protocol 
based on single-qubit states j^. 

General question arises now, whether the incoherent 
eavesdropping attack with meridional QCM discussed 
above is optimal within B92 QKD protocol? To answer 
the question, we need to analyze the success of the eaves- 
dropper in line of alternative incoherent attacks as well as 
alternative strategy for eavesdropping, namely, coherent 
( or collective) attack when the eavesdropper has oppor- 
tunity to perform collective measurements on intercepted 
qubits. Several incoherent attacks on the protocol have 
been proposed before (isj such as intercept-resend at- 
tack and the attack with entangled probe. It was found 
that the efficiency of the eavesdropping depends from the 
overlap of the states (|29p . Recently we showed that for 
wide range of the overlap 0.07 < 0(1?) < 0.50 of the 
states \u) and , the attack with meridional QCM 
gives advantage for the eavesdropper to obtain more in- 
formation causing less discrepancy than any known in- 
coherent attack [20|. For small overlap when the states 
are almost orthogonal, however, intercept-resend attack 
is optimal; while for large overlap the attack with the en- 
tangled probe is optimal (see |20| for further discussion). 
Moreover, the eavesdropping with meridional QCM is op- 
timal independently from incoherent or coherent strategy 
of the eavesdropping, since it was shown that coherent 
strategy for the eavesdropping gives negligible small ad- 
ditional information comparing to the incoherent strat- 
egy in the protocols for quantum key distribution based 
on singlc-qubit states [1, Q . 



IV. CONCLUSIONS 

Unlike the well-known universal [HI and equatorial Q 
quantum cloning, we have presented a QCM that pro- 
vides high-fidelity copies for all states from a selected 
meridian (i.e. half-circle) of the Bloch sphere. This 
(so-called) meridional QCM was constructed to provide 
hight-fidelity copies with 0.95 > F > 0.90 for all states 
along the Eastern meridian. Although this QCM pro- 
vides high-fidelity copies for the Eastern meridian, it can 
be applied with little adaptions also to other meridians. 
All what is needed to follow the 'optimization' procedures 
as described in Subsection III CI 

The suggested QCM has been applied also to analyze 
a possible eavesdropping attack in the data transmission 
between Alice and Bob, following Bennett's B92 QKD 
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protocol From this analysis, it is shown that Eve, 

the eavesdropper, can obtain more information from the 
meridional than from the universal or equatorial QCM's. 
The probability that Bob (as the legitime user) will de- 
tect the attack (0.05 < D < 0.10) is lower for the merid- 
ional than in case of the universal {D « 0.17) or equato- 
rial {D w 0.15) quantum copying. Moreover, the eaves- 
dropping attack with meridional QCM is found to be 
optimal for particular choices of states which are used to 



encode information in the protocol [21 
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